Network Packet Spoofing Vulnerability in GRE and GRE6 Protocols by IETF
CVE-2024-7595

6.5MEDIUM

Key Information:

Vendor

Ietf

Status
Rfc2784 - Generic Routing Encapsulation (gre)
Vendor
CVE Published:
5 February 2025

What is CVE-2024-7595?

The GRE and GRE6 Protocols allow an attacker to exploit a weakness in the source validation of network packets. This lack of proper validation can lead to the spoofing of packets and unauthorized routing of network traffic through an exposed interface. As a result, this vulnerability may enable various network security issues including access control bypass and unexpected behaviors in network communication.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

RFC2784 - Generic Routing Encapsulation (GRE) STD 1

References

https://datatracker.ietf.org/doc/html/rfc2784
https://www.rfc-editor.org/rfc/rfc6169.html

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.